Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/alrwvBe5so7ApKnDHBNuNJ3U6ng.roa
File: alrwvBe5so7ApKnDHBNuNJ3U6ng.roa (raw, json)
Hash identifier: lDBgo5pyJdzfNedaQxDa5GME4cKq1QiI8b9G4n407mE=
Subject key identifier: 6A:5A:F0:BC:17:B9:B2:8E:C0:A4:A9:C3:1C:13:6E:34:9D:D4:EA:78
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 01856C25E27217EE34933DFDE9B4D81227FF
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/alrwvBe5so7ApKnDHBNuNJ3U6ng.roa
Signing time: Sun 01 Jan 2023 07:05:00 +0000
ROA not before: Sun 01 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39401
IP address blocks: 193.93.24.0/22 maxlen: 24
91.192.236.0/22 maxlen: 24
2a0d:9a00::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:e2:72:17:ee:34:93:3d:fd:e9:b4:d8:12:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jan 1 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5af0bc17b9b28ec0a4a9c31c136e349dd4ea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:6b:0e:ce:cf:fa:a4:2f:a6:89:d7:0a:15:
f0:85:26:af:95:d8:46:5b:29:21:16:90:0c:3c:27:
6b:bf:ef:a8:b8:4e:9b:e5:81:49:4d:6e:3d:ec:0b:
01:6f:0e:8c:80:b1:b1:c9:a4:63:9e:7c:25:83:0a:
68:0f:ad:c4:01:6d:86:eb:9d:95:44:f2:86:f5:ca:
e4:f4:37:86:22:86:2b:cf:1c:32:e7:e5:5e:e4:ed:
a5:fa:2d:05:dc:af:af:80:94:ec:43:0b:4d:3a:7f:
1a:11:9a:a1:d8:6b:d2:fe:f6:3c:53:b8:34:69:d7:
5f:7e:1d:98:9d:6b:80:9a:23:29:10:94:8d:df:57:
88:25:17:2c:5c:17:e5:5c:34:88:3e:8e:68:a3:78:
00:d5:b5:07:4d:f4:c6:5a:46:08:75:20:7a:80:a0:
37:76:1c:92:50:70:07:7b:f1:fb:97:67:6a:3b:02:
59:7c:98:c7:a1:5f:48:8e:0e:c3:a7:5d:e0:e3:dd:
db:9b:d2:5c:73:42:fe:d1:e8:e9:31:df:b3:1b:b0:
ad:ba:91:68:b9:8a:b5:43:b7:a3:2b:41:fd:1e:99:
96:a0:5d:c8:d8:4a:35:3f:17:f2:52:8a:a5:3e:c3:
f6:3d:23:d2:5d:18:4a:e8:94:c3:c9:0f:58:66:84:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5A:F0:BC:17:B9:B2:8E:C0:A4:A9:C3:1C:13:6E:34:9D:D4:EA:78
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/alrwvBe5so7ApKnDHBNuNJ3U6ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.236.0/22
193.93.24.0/22
IPv6:
2a0d:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
62:21:35:f1:b3:4f:cc:c2:58:98:e2:8b:28:c4:22:f8:66:f1:
2a:57:8e:21:d0:83:4d:bd:0c:90:7f:3e:38:0a:b5:97:76:03:
a5:b7:38:b1:a4:99:23:78:0e:26:2a:bf:12:d1:a8:ce:2d:1c:
2d:ce:71:54:c3:cb:8f:9e:39:a3:2f:ab:2b:3a:a4:f2:65:11:
4b:07:78:59:1c:e5:6a:03:2b:04:2e:b2:c5:f4:37:95:91:b3:
e9:a3:a9:3b:0d:42:2c:4f:8c:ba:dc:bd:f8:76:bd:a6:f5:95:
3a:1b:9e:bf:fe:28:4d:1b:f2:42:41:2b:3a:db:0d:59:40:3f:
bf:53:00:12:e7:a8:39:fc:5a:23:c9:69:cf:48:3a:19:bb:13:
51:c1:b2:83:3b:ca:11:fa:2a:d2:74:85:d6:ba:ca:72:55:b5:
02:49:61:66:ee:e0:73:60:d9:3a:eb:78:dc:e6:2b:fe:11:95:
5b:96:fe:05:f6:f0:3a:7c:8d:1c:7d:e2:f6:16:71:d6:4a:67:
17:e6:63:11:d1:45:6d:2b:3d:34:7c:e6:58:a5:bd:52:25:1e:
96:4b:2b:b2:34:79:3f:3b:83:3f:0a:ea:67:e0:3a:a2:87:e7:
2f:7b:b2:a3:96:f2:84:ac:3d:d9:47:35:f2:bd:d1:3a:e4:2b:
e7:14:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org